CVE-2006-2607 Jobs start from root when pam_limits

用户报告在设置cron进程数量限制后,超过限制的新进程会以root身份运行。通过修改limits.conf和pam.d/crond配置文件尝试将进程数限制为10个,但超出的进程却显示为root所有。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

https://bugzilla.redhat.com/show_bug.cgi?id=178431

User-Agent: Opera/8.50 (Windows NT 5.0; U; ru)

Description of problem:
I set hard nproc limit in limits.conf to 10 and uncommented "session required
pam_limits.so" in /etc/pam.d/crond
When process limit have reached new processes start from root.

Version-Release number of selected component (if applicable):
vixie-cron-4.1-36.FC4 pam-0.79-9.6

How reproducible:
Always

Steps to Reproduce:
1. Add "username hard nproc 10" to /etc/security/limits.conf
2. Uncomment line with pam_limits.so in /etc/pam.d/crond
3. Add jobs in username crontab:
* * * * * /path/to/script.pl
script.pl:
#!/usr/bin/perl

open file, '>/path/to/pid.'.$$;
close file;
while(1) { sleep(1); }



Actual Results: After some time "ps aux" shows 10 process of script.pl under the user username
but other processes are under root.
10 pidfiles owned by username:usergroup but others by root:usergroup

Expected Results: 10 processes of script.pl under username

Additional info:

Also applied to FC3

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值